PRIVACY POLICY

Les Technologies FEST inc. ("FEST", "we", "us", "our"), located at 13 T Rue Roche Bonnet, 63400 Chamalières, France, is the controller of the personal information processed in connection with our website, our mobile application FEST (the "Application"), our organizer and FEST Crew tools, and our related services (collectively, the "Services").

This Privacy Policy explains how we collect, use, share and protect your personal information. It forms part of our Terms of Use. Capitalized terms not defined here have the meaning given to them in the Terms of Use.

1. Information We Collect

We collect information you provide to us, information generated when you use the Services, and information we receive from third parties. Depending on how you use the Services, this may include:

Account information: such as your email address, name, username, profile picture, language and login credentials, including when you sign in through a third-party provider (for example Apple or Google).
Content you submit: such as reviews, ratings, photos, videos, tickets you add to the Application, contest or quiz entries, form submissions, contributions to the FEST Crew and messages you send us.
Activity and preferences: such as the festivals, artists and events you follow or plan to attend, your notification settings, points and rewards, and your interactions with features, content and promotions in the Services.
Payment-related information: when you use cashless or other payment features offered with our partners, we receive limited information such as your email, transaction amounts and status, and identifiers needed to link your account. Payment card details are handled by our payment partners, not by FEST.
Connected accounts: if you link a third-party account (for example a community service), we receive the information that service shares with us with your permission, such as your profile identifiers.
Location: with your permission, your device's approximate location, to show you festivals and content near you. You can turn this off at any time in your device settings.
Device and usage information: such as device and operating system information, app version, identifiers, IP address, country, language, crash reports, and information about how you use and navigate the Services, which may include records of your interactions with screens of the Application.
Business contact information: if you contact us, request a demo, or use our Services on behalf of a festival or organization, your name, email, phone number, role and the information you provide.

We may also access your device's camera, photo library or calendar when you choose to use a feature that requires it (for example, uploading a photo or adding an event to your calendar). This access is based on your device permissions and you can withdraw it at any time.

2. How We Use Your Information

We use your information to:

provide, operate and maintain the Services, including your account and the features you use. Legal basis under the General Data Protection Regulation ("GDPR"): performance of a contract;
personalize the Services, such as recommending festivals, artists and content. Legal basis: performance of a contract or our legitimate interests;
process, moderate and organize content submitted to the Services, including with the help of automated and artificial intelligence tools (for example, to read ticket information, to detect inappropriate content, or to classify photos and videos). Legal basis: performance of a contract or our legitimate interests;
run contests, promotions, rewards and FEST Crew programs. Legal basis: performance of a contract;
send you service messages, notifications and, where permitted, marketing communications. Legal basis: performance of a contract, our legitimate interests or your consent, as applicable;
understand how the Services are used, measure performance, fix problems and develop new features. Legal basis: our legitimate interests or your consent, where required;
provide support and respond to your requests. Legal basis: performance of a contract or our legitimate interests;
protect the Services and our users, prevent fraud and abuse, enforce our terms, and establish or defend legal claims. Legal basis: our legitimate interests;
comply with our legal obligations. Legal basis: legal obligation.

We may also use your information for other purposes with your consent, or as permitted or required by law. We may create aggregated or de-identified information that no longer identifies you and use it for any purpose.

We do not sell your personal information. We do not use automated decision-making that produces legal or similarly significant effects concerning you.

3. How We Share Your Information

We may share your information with:

Service providers: companies that help us operate the Services, such as hosting, storage, databases, authentication, email and notification delivery, analytics, crash reporting, search, maps, content moderation and artificial intelligence tools, and customer support. They may only use your information to provide services to us.
Festivals and organizers: when you interact with a festival through the Services, for example by entering a contest or promotion, submitting photos or videos, filling in a form, or using a payment or cashless feature, the relevant festival or organizer may receive the information related to that interaction, such as your name, email, username and submission. Organizers process this information under their own privacy policies.
Partners you choose to use: such as payment, ticketing or account-linking partners, when you use a feature provided with them.
Other users and the public: content you choose to publish, such as reviews, ratings, photos, your username and profile picture, may be visible to other users and on our websites.
Legal and safety reasons: when we believe it is required or appropriate under applicable law, to respond to requests from authorities, to enforce our agreements, or to protect the rights, safety or property of FEST, our users or others.
Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of all or part of our business or assets.
Anyone else with your consent or at your direction.

4. International Transfers

We and our service providers may store and process your information in countries other than your own, including in the European Union, Canada and the United States, which may have data protection laws different from those in your country. Where we transfer personal information from the European Union / European Economic Area, we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses approved by the European Commission. You may contact us for more information about these safeguards.

5. Retention

We keep your personal information for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with our legal obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. When it is no longer needed, we delete or anonymize it.

You can delete your account at any time from the Application. After a short grace period, we delete or anonymize the information associated with your account, except for information we need to keep for the reasons set out above, for example to prevent abuse of contests and promotions or to meet legal and accounting obligations. Content shared with festivals or published to other users before deletion may remain available to them.

6. Security

We use reasonable physical, organizational and technical measures to protect your personal information, including encryption of data in transit and at rest and access controls that limit who can access it. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, please contact us.

7. Your Rights

Depending on where you live, and subject to applicable law, you may have the right to:

access the personal information we hold about you;
correct inaccurate or incomplete information;
delete your information;
object to, or ask us to restrict, certain processing, including processing based on our legitimate interests and direct marketing;
receive your information in a portable format;
withdraw your consent at any time, where processing is based on consent, without affecting processing carried out before withdrawal;
define directives regarding the handling of your personal information after your death (France).

To exercise these rights, contact us at privacy@festapp.io. We may need to verify your identity before responding. You also have the right to lodge a complaint with a data protection authority, in particular in your country of residence. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), www.cnil.fr.

8. Communications and Notifications

You can unsubscribe from marketing emails using the link in any such email, and manage push notifications in the Application or your device settings. We may still send you messages related to your account and your use of the Services.

9. Third-Party Services

The Services may contain links to, or integrations with, third-party websites, applications and services, including festival websites and services you choose to connect. This Privacy Policy does not apply to them, and we are not responsible for their practices. We encourage you to review their privacy policies.

10. Google User Data

If you sign in to the Application with your Google account, FEST receives the following information from Google, only after you approve it on Google's consent screen: your name, email address, profile picture and Google account identifier. We do not request access to your Gmail, Google Drive, Google Calendar, contacts or any other Google service data.

Use: we use this information only to create your FEST account, sign you in, and show your name and profile picture in your account and alongside content you choose to publish.
Sharing: we share it only with the service providers that host our authentication and databases (such as Google Firebase), so they can provide those services to us, with a festival when you choose to interact with it as described in section 3, or when required by law. We do not sell it, and we do not use or transfer it for advertising.
Protection: it is encrypted in transit (TLS) and at rest by our hosting providers, and access is limited to the personnel and service providers who need it to operate the Services.
Retention and deletion: we keep it for as long as your account exists. When you delete your account from the Application, we delete it as described in section 5. You can also ask us to delete it at privacy@festapp.io, and you can remove FEST's access to your Google account at any time at https://myaccount.google.com/permissions.

FEST's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not use information received from Google APIs to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models.

11. Children

The Services are not intended for children under the minimum age set out in our Terms of Use. If you are below the age at which you can consent to the processing of your personal information in your country (15 in France), you may only use the Services with the consent of a parent or guardian. If you believe a child has provided us with personal information without the required consent, please contact us and we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Services with a new "Last updated" date. If we make material changes, we will notify you by appropriate means, such as through the Application or by email.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Les Technologies FEST inc.
13 T Rue Roche Bonnet, 63400 Chamalières, France
privacy@festapp.io

Last updated: October 2026